Complete feed
Recently updated
Advisories the vendor has revised
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-67300] Use-After-Free vulnerability leading to denial of service
Use-After-Free vulnerability leading to denial of service. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-825.
Medium [CVE-2026-67292] Information Disclosure and Denial of Service via WebSocket Ping
Information Disclosure and Denial of Service via WebSocket Ping. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-805.
Medium [CVE-2026-67299] Denial of Service via crafted WindowIcon async message
Denial of Service via crafted WindowIcon async message. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-416. Red Hat lists fixing advisory RHSA-2026:54487 with package freerdp-2:2.11.7-11.el8_10, freerdp-2:2.11.7-7.el9_8.5, freerdp-2:3.10.3-12.el10_2.8. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10.
Medium [CVE-2026-67318] Denial of Service due to maxBodyLength bypass in HTTP/2 requests
Denial of Service due to maxBodyLength bypass in HTTP/2 requests. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:50826 with package grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
Medium [CVE-2026-67315] NO_PROXY bypass allows exposure of local services
NO_PROXY bypass allows exposure of local services. Red Hat rates this moderate (CVSS 5.8). Weakness: CWE-115. Red Hat lists fixing advisory RHSA-2026:50826 with package grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
Medium [CVE-2026-67319] Information disclosure and data manipulation via prototype pollution
Information disclosure and data manipulation via prototype pollution. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-915. Red Hat lists fixing advisory RHSA-2026:49387 with package grafana13-1-main-13.1.1-0.4.hum1, grafana12-4-main-12.4.6-0.3.hum1.
Medium [CVE-2026-67291] Denial of Service via heap out-of-bounds read
Denial of Service via heap out-of-bounds read. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-67303] Denial of Service via unsupported serial device control request
Denial of Service via unsupported serial device control request. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-617.
Medium [CVE-2026-67288] Denial of Service via crafted smartcard cache requests
Denial of Service via crafted smartcard cache requests. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-476. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 1 more. Affected products named by the advisory: Red Hat package: freerdp.
Medium [CVE-2026-66402] Server Identity Verification Bypass via TLS Certificate Validation Weaknesses
Server Identity Verification Bypass via TLS Certificate Validation Weaknesses. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-222.
Medium [CVE-2026-67338] Stored cross-site scripting in Extension Manager allows arbitrary code execution
Stored cross-site scripting in Extension Manager allows arbitrary code execution. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-79. Affected products named by the advisory: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-67296] Denial of Service due to RDPEI message processing
Denial of Service due to RDPEI message processing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-20.
Medium [CVE-2026-67304] Denial of Service via null pointer dereference in smartcard cleanup
Denial of Service via null pointer dereference in smartcard cleanup. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476.
Medium [CVE-2026-67289] HTTP Proxy Request Injection via Redirection
HTTP Proxy Request Injection via Redirection. Red Hat rates this moderate (CVSS 5). Weakness: CWE-93. Red Hat lists fixing advisory RHSA-2026:54487 with package freerdp-2:2.11.7-11.el8_10, freerdp-2:2.11.7-7.el9_8.5, freerdp-2:3.10.3-12.el10_2.8. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10.
Medium [CVE-2026-67293] Weakens TLS server authentication due to improper wildcard certificate hostname validation
Weakens TLS server authentication due to improper wildcard certificate hostname validation. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-295.
Medium [CVE-2026-67317] Denial of Service via maxBodyLength bypass with ReadableStream
Denial of Service via maxBodyLength bypass with ReadableStream. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:50826 with package grafana13-1-main-13.1.1-0.5.2.hum1, grafana13-1-main-13.1.1-0.5.hum1.
Medium [CVE-2026-67297] Resource exhaustion due to oversized chunked HTTP responses
Resource exhaustion due to oversized chunked HTTP responses. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770.
Medium [CVE-2026-67301] Memory disclosure or denial of service via crafted RDP update orders
Memory disclosure or denial of service via crafted RDP update orders. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-125.
Medium [CVE-2026-67290] Denial of Service via malformed media data
Denial of Service via malformed media data. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-18321] Denial of Service via buffer overflow in Zyfer refclock
Denial of Service via buffer overflow in Zyfer refclock. Red Hat rates this low (CVSS 4.7). Weakness: CWE-120.